M1HIIIIIIIIHIIII 

(11) EP 0 751 462 B1 

(12) EUROPEAN PATENT SPECIFICATION 

(45) Date of publication and mention (51 ) | n t ci. 7 : G06F 11/14 

of the grant of the patent: 
31.07.2002 Bulletin 2002/31 

(21) Application number: 96302962.4 

(22) Date of filing: 26.04.1996 




Europaisches Patentamt 
European Patent Office 
Office europeen des brevets 



(54) A recoverable disk control system with a non-volatile memory 

Wiederherstellbares Plattensteuersystem mit nichtfluchtigem Speicher 
Systeme de commande de disque restaurable avec memoire remanente 



(84) Designated Contracting States: 
OE FR GB 

(30) Priority: 19.06.1995 JP 15173795 

(43) Date of publication of application: 
02.01.1997 Bulletin 1997/01 

(73) Pfoprietor: KABUSHIKI KAISHA TOSHIBA 
Kawasaki -shi, Kanagawa-ken 210-8572 (JP) 

(72) Inventors: 

• Shimizu, Kuniyasu, do Toshiba Corp. 
Tokyo (JP) 



CD 

CM 
CO 



m 
o 

LJJ 



♦ Hirayama, Hideaki, c/o Toshiba Corp. 
Tokyo (JP) 

(74) Representative: Shindler, Nigel 
Brookes Batchellor 
102-108 Clerkenwell Road 
London EC1M 5SA (GB) 



(56) References cited: 
EP-A-0 572 019 
US-A- 5 392 445 



US-A- 5 241 672 



Note: Within nine months from the publication of the mention of the grant of the European patent, any person may give 
notice to the European Patent Office of opposition to the European patent granted. Notice of opposition shall be filed in 
a written reasoned statement. It shall not be deemed to have been filed until the opposition fee has been paid. (Art. 
99(1) European Patent Convention). 



Printed by Jouve. 75001 PARIS (FR) 



1 



EP 0 751 462 B1 



2 



Description 

[0001] This invention relates to a computer system 
using a checkpoint method, and in particular, concerns 
a disk control system that enables high-speed disk ac- 
cess to avoid processing delay associated with the 
checkpoint method. 

RELATED BACKGROUND ART 

[0002] A computer system using the checkpoint meth- 
od postpones write operation to a disk device until the 
next checkpoint is acquired. Otherwise, if the next time 
the computer system restarts from the last checkpoint 
because of a fault, the disk device would not be able to 
be restored to the state of the time of the last checkpoint. 
This causes a considerable performance degradation. 

TECHNICAL PROBLEM AND THE SOLUTION 

[0003] The purpose of this invention is to provide a 
recoverable disk device without the processing delay 
associated with the checkpoint method. 
[0004] Another purpose of this invention is to acceler- 
ate a disk write operation by using a nonvolatile memory. 
[0005] In accordance with the present invention, the 
foregoing objects, among others, are achieved by pro- 
viding a computer system executing a checkpoint oper- 
ation, the system restarting from the last checkpoint sta- 
tus if a fault occurred, the system characterized in that 
said disk device is for reading and storing data, said op- 
erating system is for issuing a write or a read request to 
the disk device and in that the system further includes 
a nonvolatile memory, write request storage means for 
storing write data and an associated write request in the 
nonvolatile memory, and disk write means for storing the 
write data stored in the nonvolatile memory by the write 
request storage means into the disk device, the disk 
write means further including means for storing write da- 
ta according to the write request generated before the 
last checkpoint from the nonvolatile memory to the disk 
device. 

[0006] There has also been provided, in accordance 
with another aspect of the present invention, a method 
of controlling disk access in a computer system execut- 
ing a checkpoint operation periodically, the system re- 
starting from the last checkpoint prior to a fault occuring 
therein, the system comprising a disk device for storing 
data to be processed in the system and an operating 
system for issuing a write request to the disk device, 
characterized in comprising the steps of first storing 
write data and an associated write request from said op- 
erating system to said disk device into a nonvolatile 
memory, second storing the write data stored in the non- 
volatile memory into said disk device, the second storing 
step including the step of storing write data generated 
before the last checkpoint from the nonvolatile memory 
to the disk device. 



[0007] This invention stores write data requested by 
an operating system into the nonvolatile memory. Also 
this invention stores write data corresponding to a write 
request generated before an execution of the last check- 

5 point from the nonvolatile memory to the disk device. 
[0008] This invention can secure fault resistance. The 
disk control system of this invention can improve the la- 
tency of the disk access by avoiding the delay of the 
processing resulting from view of checkpoint execution. 

10 [0009] Other objects, features, and advantages of the 
present invention will become apparent from the follow- 
ing detailed description. It should be understood, how- 
ever, that the detailed description and specific exam- 
ples, while indicating preferred embodiments of the in- 

15 vention, are given by way of illustration only, since var- 
ious changes and modifications within the scope of the 
invention will become apparent to those skilled in the art 
from this detailed description. 

20 BRIEF DESCRIPTION OF THE DRAWINGS 

[0010] Figure 1 is a schematic block diagram of a 
computer system using a checkpoint and in which the 
disk control system of this invention is applied. 
25 [001 1] Figure 2 is a schematic block diagram illustrat- 
ing the elements of one embodiment of a computer sys- 
tem where a write request sends data, to a nonvolatile 
memory. 

[001 2] Figure 3 is a schematic block diagram illustrat- 
30 ing the movement of data from the indefinite queue to 
the definite queue. 

[0013] Figure 4(a) is a flow chart illustrating the write 

process of this disk control system. 

[0014] Figure 4(b) is a flow chart illustrating the check- 

35 point operation of this disk control system. 

[001 5] Figure 4(c) is a flow chart illustrating the back- 
ground processing of this disk control system. 
[0016] Figure 5(a) is a block diagram illustrating the 
link control structure of a nonvolatile memory. 

40 [0017] Figure 5(b) is a flow chart illustrating the 
processing of a disk write. 

[0018] Figure 5(c) illustrates write data and write re- 
quest structures in the nonvolatile memory. 
[001 9] Figures 6 and 7 are block diagrams illustrating 
45 the operation of a disk control system, when a fault oc- 
curs in the computer system. 

[0020] Figure 8 is a time chart illustrating the opera- 
tion of a disk control system, when a fault occurs in the 
computer system. 

50 [0021] Figure 9(a) is a flow chart illustrating the recov- 
ery sequence (1) of this disk control system. 
[0022] Figure 9(b) is a flow chart illustrating the recov- 
ery sequence (2) of this disk control system. 
[0023] Figure 9(c) is a flow chart illustrating the read 

55 processing of this disk control system. 
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DESCRIPTION OF SPECIAL EMBODIMENT 

[0024] One embodiment of this invention is explained, 
referring to the drawings. 

[0025] Figure 1(a) is a block diagram of a computer 
system using a checkpoint method to which the disk 
control system of this invention is applied. 
[0026] When a processor 1 updates the content of a 
main memory 2, this computer system records the be- 
fore image of the updated portion into a log memory 6. 
The information of context on the processor and the con- 
tent of a cache memory are written in the main memory 
at a checkpoint. The state that is needed to restart data 
processing from the last checkpoint is kept in the main 
memory and the log memory. When a fault occurs, the 
computer system restores the main memory state of the 
last checkpoint by writing back the before image to the 
updated portion of the main memory. At the end of the 
checkpoint operation, the content of the log memory is 
cleared. Moreover, the computer system of this inven- 
tion has a nonvolatile memory 3 as an auxiliary memory 
and a disk device 4. 

[0027] Figure 1 (b) is a block diagram of the disk con- 
trol system of this invention. As shown in Figure 1(b), 
the disk control system has a write request storage 
means 11, a write request fix means 12, a write request 
discard means 13 and a disk write means 14. 
[0028] When an operating system generates a write 
request to the disk device, the write request storage 
means stores the write request and the associated write 
data into the nonvolatile memory. Although the write re- 
quest is kept in the nonvolatile memory at this point, the 
associated data can not be written to the disk device 
before the next checkpoint. If a fault occurs before the 
end of next checkpoint operation, the write request and 
write data are discarded. Hereafter, we say that such a 
write request and data stored in the nonvolatile memory 
are in an indefinite state. 

[0029] When the operation of the next checkpoint is 
executed without any faults, the write request fix means 
changes the state of the write request in the nonvolatile 
memory from an indefinite state to a definite state. This 
means that even if a fault occurs afterward such a 
change in state, the write request is definitely to be ex- 
ecuted. 

[0030] If a fault occurs before the next checkpoint ex- 
ecution, the write request discard means discards disk 
write requests and the associated data in the indefinite 
state. 

[0031 ] The disk write means executes a disk write op- 
eration according to disk write requests in the definite 
state kept in the nonvolatile memory. 
[0032] Next, the operation of this invention is ex- 
plained, referring to Figures 2 - 9, which are block dia- 
grams and flow charts illustrating the operation of one 
embodiment of this invention. 

[0033] First, as shown in Figure 1 (a), when a write re- 
quest to the disk device is received from the operating 



system, the write request storage means puts the write 
request and the associated write data in the nonvolatile 
memory. 

[0034] As depicted in Figure 2, the nonvolatile mem- 
5 ory has an indefinite queue 31 and a definite queue 32. 
A write request and the associated write data received 
after the last checkpoint are stored in the indefinite 
queue of the nonvolatile memory. Upon execution of the 
checkpoint without a fault, the write requests and the 
10 associated write data in the indefinite queue are moved 
to the definite queue of the nonvolatile memory. 
[0035] When a write request is stored in the indefinite 
queue of the nonvolatile memory by the write request 
storage means, the disk control system informs "write 
*5 completion" to the operating system (S13 in Figure 4 
(a)). Thereby, the operating system does not have to 
wait for the actual completion of the write request, which 
improves performance considerably. 
[0036] Next, the operation of the disk control system 
during a checkpoint execution is explained, referring to 
Figure 3. 

[0037] It is assumed that the checkpoint of this com- 
puter system is executed at a state shown in Figure 2. 
When the nonvolatile memory is filled with write data, a 
checkpoint is compulsorily executed. The disk control 
system checks the size of the free area of the nonvolatile 
memory. If the capacity of the nonvolatile memory is be- 
low a predetermined value, or after a fixed time to exe- 
cute the checkpoint of the computer system has 
elapsed, I/O processing from the operating system is re- 
started. The I/O processing from the operating system 
is delayed, while the checkpoint is being executed. 
[0038] During checkpoint operation, first, write re- 
quests and their write data stored in the indefinite queue 
are moved to the definite queue by the write request fix 
means (Figure 3 and S15 in Figure 4(b)). This move- 
ment does not necessarily need physical movement of 
the whole data but changing pointers. The method of 
controlling a write request and write data stored in the 
nonvolatile memory is explained later, referring to Figure 
5. 

[0039] After the checkpoint, the disk write means ex- 
ecutes the disk write operation according to the write 
request stored in the definite queue (Figure 3 and S17 
in Figure 4(c)). It is recommended that the write opera- 
tion to the disk device by the disk write means is properly 
executed according to the priority of the write request 
and the load of the computer system. 
[0040] The nonvolatile memory contains an indefinite 
queue, a definite queue, request structures, and write 
data, referring to Figure 5(a). The indefinite queue and 
the definite queue have a control block (not shown) for 
managing the request structures. The indefinite queue 
has two request structures 4 and 5 as shown in Figure 
5(a). The definite queue has .three request structures 
1, 2 and 3 as shown in Figure 5(a). Control information 
on a request structure has a write flag which shows that 
the data is now writing to the disk device, pointer infor- 
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mation to the write data and next request structure, a 
disk number N, a sector number M, and the size of write 
data L, to store the write data kept in the definite queue 
into the disk device as shown in Figure 5(c). The size of 
the write data is a multiple of 512 bytes. For instance, 
the request structure 3 has the write data of 2*51 2 bytes. 
[0041] When a next checkpoint operation is executed, 
the next request pointer information of the request struc- 
ture 3 is changed to point a request structure 4. The next 
request pointer information of a request structure 5 re- 
mains unchanged. The control block of the indefinite 
queue also has means for managing the request struc- 
ture 4 until a next checkpoint operation is executed. The 
control block of the indefinite queue does not manage 
the request structure 4 after the next checkpoint opera- 
tion is executed. 

[0042] Next, a write operation to the disk is explained 
referring to Figure 3. The disk write means searches the 
define queue for the request structure where a write flag 
is not set yet (S1 00 in Figure 5(b)). The disk write means 
gets the number of the request structures, the size of 
the write data, and the control information on the request 
structure from the control block one by one. Next, the 
disk write means sets the write flag of the request struc- 
ture 1 , of which the flag has not been set yet, through 
the control block of the definite queue (S110 in Figure 5 
(b)). The disk write means stores the write data in the 
disk according to the request structure 1 (S130 in Figure 
5(b)). When the writing process of the disk ends, the disk 
write means removes the request structure 1 and the 
associated data from the link through the control block 
(S150 in Figure 5(b)). The write flags of the request 
structures 2, 3, 4 and 5 are set one by one by the similar 
way. The write data of the request structures 2,3,4 and 
5 are written in the disk device. 
[0043] Here, the operation of this invention is ex- 
plained, when a fault occurs in the computer system, 
referring to Figures 6-8. 

[0044] As shown in Figure 8, a disk write request from 
the operating system stores write requests and write da- 
ta A, B and C in the indefinite queue in the nonvolatile 
memory one by one (point® in Figure 8). The operating 
system reads the data C from the indefinite queue in the 
nonvolatile memory (point @ in Figure 8). During the 
next checkpoint operation as shown in Figure 8, under 
such a condition, A, B, and C that are stored in an in- 
definite queue of the nonvolatile memory, link to a defi- 
nite queue (CKP point in Figure 8). Also, a disk write 
request and write data from the operating system gen- 
erated after the last checkpoint are linked to the indefi- 
nite queue. 

[0045] After that, the write request and the write data 
D, E and F are linked in the indefinite queue of the non- 
volatile memory one by one (point © in Figure 8). A 
disk read request from the operating system reads the 
data F from the indefinite queue and the data C from the 
definite queue in the nonvolatile memory (point @ in 
Figure 8) 



[0046] It is assumed that a fault occurred in the com- 
puter system after the checkpoint (breakdown point in 
Figure 8). The three write requests of 6d-6f (D, E and F) 
were stored in the indefinite queue as shown in Figures 
5 6 and 8. The three write requests of 6a-6c (A, B and C) 
were stored in definite queue as shown in Figures 6 and 
8. 

[0047] In this case, the computer system of this inven- 
tion first restores the computer system to the state of the 
10 last checkpoint (CKP point in Figure 8). The computer 
system begins restarting from the checkpoint state after 
the restoring process. 

[0048] When the computer system is restarted, the 
disk control system discards ail the write requests 6d-6f 
*s stored in the indefinite queue in the nonvolatile memory 
by the write request discard means (S17 in Figure 9(a)). 
The write requests 6d-6f and the associated data are 
issued again because the system restarts from the last 
checkpoint state as mentioned above. 
20 [0049] Figure 7 illustrates the state of the nonvolatile 
memory after this recovery processing. 
[0050] On the other hand, even if the state of the com- 
puter system rolls back to the last checkpoint, the write 
requests 6a-6c stored in the definite queue in the non- 
25 volatile memory are effective. Therefore the disk write 
requests 6a-6c are properly stored in the disk device by 
. the disk write means (S19 in Figure 9(b)). 

[0051] As a result consistency of disk operations is 
maintained under control of the checkpoint method with 
30 this recoverable disk control system. In addition, the de- 
lay of the disk write according to the checkpoint method 
can be excluded. Thus, the latency of the disk access 
can be improved. 

[0052] Next, a read request from the operating system 
35 is explained, referring to Figures 8 and 9. 

[0053] At this time, the disk control system decides 
whether there are data to be read from the nonvolatile 
memory (S21 in Figure 9(c)). If there are data to be read 
out (Yes of S21 in Figure 9(c)), the data is read from the 
40 nonvolatile memory (© and ® points in Figures 8 and 
S25 in Figure 9(c)). After that, this read processing ends. 
[0054] On the other hand, if there are not data to be 
read from the nonvolatile memory (No of S21 in Figure 
9(c)), the disk control system accesses the disk device 
45 (S23 in Figure 9(c)). At this point, it is recommended that 
the data read from the disk device is able to be stored 
in the nonvolatile memory. 

[0055] As explained in detail above, when a fault in 
the computer system occurs, this invention may have 

50 stored a write request into the definite queue of the non- 
volatile memory. The write request which is generated 
before the last checkpoint operation is executed. Also 
this invention stores a write request in the indefinite 
queue of the nonvolatile memory, the write request 

55 which is generated after the last checkpoint is executed 
after the next checkpoint. For instance, even if a power 
supply failure occurs in the computer system, the infor- 
mation of the write request is maintained because the 
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information on the write request is stored in the nonvol- 
atile memory. 

[0056] The disk control system of this invention aban- 
dons all the write requests and the write data generated 
after the last checkpoint which are stored in the indefi- 
nite queue in the nonvolatile memory. However, the data 
in the definite queue is written into the disk device. Thus, 
even if the computer system is broken down by the pow- 
er supply failure, the write data in the definite queue is 
written into the disk device at the reboot of the computer 
system. 

[0057] Concurrently with the processing of write re- 
quests from the operating system, write data which are 
generated before the last checkpoint is stored in the disk 
device. 

[0058] Moreover, as for a read request to the disk de- 
vice, the disk control system of this invention first exam- 
ines whether the requested data is on the nonvolatile 
memory so that the read request keeps coherency just 
like normal access to the disk device. 
[0059] As a result, the disk control system of this in- 
vention can secure fault tolerance of the computer sys- 
tem. The disk control system of this invention can im- 
prove the latency of the disk access by avoiding the de- 
lay resulting from a checkpoint execution. 
[0060] Numerous modifications and variations of the 
present invention are possible in light of the above 
teachings. It is therefore to be understood that, within 
the scope of the appended claims, the present invention 
can be practiced in a manner other than as specifically 
described herein. 



Claims 

1 . A computer system executing a checkpoint opera- 
tion periodically, the system restarting from the last 
checkpoint prior to a fault occurring therein, the sys- 
tem comprising a disk device (4) for storing data to 
be processed in the system, and an operating sys- 
tem (15) for issuing a write request to the disk de- 
vice, characterized in that 

said disk device is for reading and storing data; 
said operating system is for issuing a write or a 
read request to the disk device; and in that the 
system further includes 

a nonvolatile memory (3); 
write request storage means (11) for stor- 
ing write data and an associated the write 
request in the nonvolatile memory; and 
disk write means (14) for storing the write 
data stored in the nonvolatile memory by 
the write request storage means into the 
disk device, the disk write means further in- 
cluding means for storing write data ac- 
cording to the write request generated be- 



fore the last checkpoint from the nonvola- 
tile memory to the disk device. 

2. The computer system of claim 1 , characterized in 
5 that further the system includes means for notifying 

a write completion to the operating system, after 
storing the write request and the associated write 
data in the nonvolatile memory, when a write re- 
quest from the operating system to the disk device 
10 is issued. 

3. A computer system of claim 1 , characterized in 
that further the system includes: 

15 means for reading the write data from the non- 

volatile memory if there is the corresponding 
data on the nonvolatile memory, when the op- 
erating system issues a read request to the disk 
device; and 

20 means for reading the write data from the disk 

device, if there is not the corresponding data on 
the nonvolatile memory. 

4. The computer system of claim 1 , characterized in 
25 that further the system includes write request dis- 
card means (13) for invalidating write data and cor- 
responding write requests generated after the last 
checkpoint, when a fault occurred in the system. 

30 5. The computer system of claim 1, characterized in 
that the write request storage means includes an 
indefinite queue (31) for storing a write request 
which is generated after the last checkpoint, and a 
definite queue (32) for storing a write request which 

35 is generated before the last checkpoint. 

6. The computer system of claim 5, characterized in 
that further the system includes write request fix 
means (12) for moving the write data stored in the 

40 indefinite queue to the definite queue, while a 
checkpoint operation is executed. 

7. The computer system of claim 5, characterized in 
that the write request storage means includes 

45 means for storing the write request and the associ- 
ated write data in the indefinite queue. 

8. The computer system of claim 5, characterized in 
that the disk write means includes means for stor- 

50 ing the write data stored in the definite queue into 
the disk device. 

9. The computer system of claim 5, characterized in 
that the system includes means for storing all write 

55 data stored in the definite queue into the disk de- 
vice, while rebooting the computer system. 

10. The computer system of claim 5, characterized in 
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that the indefinite and definite queues includes con- 
trol block means for controlling each of write data 
and the associated write request, each of the write 
data having a request structure for linking write data 
and next request structure. 5 



read request to the disk device ; and 
second reading (S21 f S23) write data from the 
disk device, if there is not acquired write data 
among write data stored in the nonvolatile 
memory (3). 



11. The computer system of claim 10, characterized 
in that the request structure includes a writing flag 
for indicating that the write processing to the disk 
device is executed. 



1 6. The method of claim 1 3, further comprising the step 
of invalidating (S17) all write data and the corre- 
sponding write request generated after the last 
10 checkpoint, if a fault has occurred. 



12. The computer system of claim 11 , characterized in 
that the disk write means comprises: 

means for detecting whether a write flag of the 
request structure is set or not; 
means for setting the writing flag, if the write 
flag is not set; 

means for storing write data of the definite 
queue to the disk device, based on information 
of the request structure; and 
means for removing the request structure and 
the associated write data when writing the data 
to the disk device is completed. 

13. A method of controlling disk access in a computer 
system executing a checkpoint operation periodi- 
cally, the system restarting from the last checkpoint 
prior to a fault occuring therein, the system compris- 
ing a disk device for storing data to be processed in 
the system and an operating system for issuing a 
write request to the disk device, characterized in 
comprising the steps of: 

first storing (S10) write data and an associated 
write request from said operating system to 
said disk device into a nonvolatile memory (3); 
second storing (S17. S130) the write data 
stored in the nonvolatile memory (3) into said 
disk device (4), the second storing step includ- 
ing the step of storing write data generated be- 
fore the last checkpoint from the nonvolatile 
memory (3) to the disk device (4). 

14. The method of claim 13, further comprising the step 
of notifying (S 1 3) a write completion to the operating 
system, after storing the write data and the associ- 
ated write request to the nonvolatile memory, when 
a write request from the operating system to the disk 
device is issued. 



17. The method of claim 13, wherein the nonvolatile 
memory includes an indefinite queue (31) for stor- 
ing write data and the associated write request 
which generated after the last checkpoint and a 
definite queue (32) for storing write data to the disk 
device generated before a last checkpoint, further 
comprising the step of moving (S15) the write re- 
quest and write data stored in an indefinite queue 
to a definite queue, while a checkpoint operation is 
executing. 

18. The method of claim 13, wherein the nonvolatile 
memory includes an indefinite queue (31) for stor- 
ing write data and the associated write request 
which generated after the last checkpoint, and a 
definite queue (32) for storing write data into the 
disk device generated before the last checkpoint, 
wherein the second storing step includes the step 
of storing (S17) the write data stored in the definite 
queue into the disk device. 

19. The method of claim 13, wherein the nonvolatile 
memory includes an indefinite queue (31) for stor- 
ing write data and the associated write request 
which generated after the last checkpoint, and a 
definite (32) queue for storing write data and the as- 
sociated write request to the disk device generated 
before the last checkpoint, further comprising the 
step of storing (S19) all write data stored in the def- 
inite queue into the disk device, while recovering the 
computer system. 

20. The method of claim 13, wherein the nonvolatile 
memory includes an indefinite queue (31) for stor- 
ing write data and the associated write request 
which generated after the last checkpoint, wherein 
the first storing step includes the step of discarding 
(S17) the write data and write requests in the indef- 
inite queue after a fault occurred. 



20 
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15. The method of claim 13, further comprising the 
steps of: 

first reading (S21 , S25) the write data from the 
nonvolatile memory if there is acquired write 
data among write data stored in the nonvolatile 
memory, when the operating system issues a 



Patentanspruche 

55 1. Ein Computersystem, das periodisch eine Pruf- 
punktoperation ausfuhrt, wobei das System von 
dem letzten Prufpunkt, der vor einem Fehler darin 
auftritt, neu startet, wobei das System eine Platten- 
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einrichtung (4) zum Speichern von in dem System 
zu verarbeitenden Daten und ein Betriebssystem 
(15) zum Ausgeben einer Schreibanfrage an die 
Platteneinrichtung aufweist, dadurch gekenn- 
zeichnet, daft 5 

die genannte Platteneinrichtung zum Lesen 
und Speichern von Daten vorgesehen ist; 
das genannte Betriebssystem zum Ausgeben 
einer Schreib- oder einer Leseanfrage an die 10 
Platteneinrichtung vorgesehen ist und das Sy- 
stem femer aufweist: 

einen nichtfluchtigen Speicher (3); 
Schreibanfragenspeichermittel (11) zum *5 
Speichern von Schreibdaten und einer zu- 
gehorigen Schreibanfrage in den nicht- 
fluchtigen Speicher; und 
Plattenschreibmittel (14) zum Speichern 
der in dem nichtfluchtigen Speicher ge- 20 
speicherten Daten durch die Schreibanfra- 
genspeichermittel in die Platteneinrich- 
tung, wobei die Plattenschreibmittel ferner 
Mittel zum Speichern von Schreibdaten 
entsprechend der Schreibanfrage aufwei- 25 
sen, die vor dem letzten Prufpunkt von dem 
nichtfluchtigen Speicher zu der Plattenein- 
richtung erzeugt worden ist 

Das Computersystem nach Anspruch 1 , dadurch 30 
gekennzeichnet, daft das System ferner Mittel auf- 
weist zum Melden einer Beendigung des Schrei- 
bens an das Betriebssystem nach dem Speichern 
der Schreibanfrage und der zugehorigen Schreib- 
daten in den nichtfluchtigen Speicher, wenn eine 35 
Schreibanfrage von dem Betriebssystem an die 
Platteneinrichtung ausgegeben wird. 

Ein Computersystem nach Anspruch 1, dadurch 
gekennzeichnet, daft das System ferner aufweist: *o 

Mittel zum Lesen der Schreibdaten aus dem 
nichtfluchtigen Speicher, fells sich die entspre- 
chenden Daten in dem nichtfluchtigen Speicher 
befinden, wenn das Betriebssystem eine Lese- 45 
anfrage an die Platteneinrichtung ausgibt; und 
Mittel zum Lesen der Schreibdaten aus der 
Platteneinrichtung, falls sich die entsprechen- 
den Daten nicht in dem nichtfluchtigen Spei- 
cher befinden. so 

Das Computersystem nach Anspruch 1, dadurch 
gekennzeichnet, daft das System femer Schreib- 
anfragenverwerfmittel (13) aufweist zum Ungultig- 
machen der Schreibdaten und zugehdriger Schrei- 55 
banfragen, die nach dem letzten Prufpunkt erzeugt 
wurden, wenn ein Fehler in dem System aufgetre- 
ten ist. 



5. Das Computersystem nach Anspruch 1 , dadurch 
gekennzeichnet, daft das Schreibanfragenspei- 
chermittel eine unbestimmte Warteschlange (31) 
zum Speichern einer Schreibanfrage, die nach dem 
letzten Prufpunkt erzeugt wurde, und eine bestimm- 
te Warteschlange (32) zum Speichern einer Schrei- 
banfrage, die vor dem letzten Prufpunkt erzeugt 
wurde, aufweist. 

6. Das Computersystem nach Anspruch 5, dadurch 
gekennzeichnet, daft das System ferner Schreib- 
anfragenfixiermittel (12) aufweist zum Verschieben 
der in der unbestimmten Warteschlange gespei- 
cherten Schreibdaten in die bestimmte Warte- 
schlange, wahrend eine Prufpunktoperation ausge- 
fuhrt wird. 

7. Das Computersystem nach Anspruch 5, dadurch 
gekennzeichnet daft das Schreibanfragenspei- 
chermittel Mittel zum Speichern der Schreibanfrage 
und der zugehorigen Schreibdaten in der unbe- 
stimmten Warteschlange aufweist. 

8. Das Computersystem nach Anspruch 5, dadurch 
gekennzeichnet, daft das Plattenschreibmittel Mit- 
tel zum Speichern der in der bestimmten Warte- 
schlange gespeicherten Schreibdaten in der Plat- 
teneinrichtung aufweist. 

9. Das Computersystem nach Anspruch 5, dadurch 
gekennzeichnet, daft das System Mittel aufweist, 
die alle in der bestimmten Warteschlange gespei- 
cherten Schreibdaten in die Platteneinrichtung 
schreibt en, wahrend das Computersystem neu 
bootet. 

10. Das Computersystem nach Anspruch 5, dadurch 
gekennzeichnet, daft die unbestimmte und die be- 
stimmte Warteschlange Steuerblockmittel aufwei- 
sen zum Steuern jeweils der Schreibdaten und der 
zugehorigen Schreibanfrage, wobei die Schreibda- 
ten jeweils eine Anfragestruktur zum Verbinden der 
Schreibdaten und der nachsten Anfragestruktur 
aufweisen. 

11. Das Computersystem nach Anspruch 10, dadurch 
gekennzeichnet, daft die Anfragestruktur ein 
Schreibflag aufweist zum Anzeigen, daft der 
Schreibvorgang auf die Platteneinrichtung ausge- 
fuhrt wird. 

12. Das Computersystem nach Anspruch 11, dadurch 
gekennzeichnet, daft das Plattenschreibmittel 
aufweist: 

Mittel zum Detektieren, ob ein Schreibflag der 

Anfragestruktur gesetzt ist oder nicht; 

Mittel zum Setzen des Schreibflags, falls das 
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Schreibfiag nicht gesetzt ist; 
Mittel zum Speichem von Schreibdaten derbe- 
stimmten Warteschlange auf der Plattenein- 
richtung, basierend auf einer information der 
Anfragestruktur; und 

Mittel zum Entfernen der Anfragestruktur und 
der zugehorigen Schreibdaten, wenn das 
Schreiben der Daten auf die Platteneinrichtung 
beendet ist. 

13. Ein Verfahren zum Steuern eines Piattenzugriffs in 
einem Computersystem, das periodisch eine Pruf- 
punktoperation ausfuhrt, wobei das System von 
dem letzten Prufpunkt vor einem Fehler, der darin 
aufgetreten ist, neu startet, wobei das System eine 
Platteneinrichtung zum Speichem von in dem Sy- 
stem zu verarbeitenden Daten und ein Betriebssy- 
stem zum Ausgeben einer Schreibanfrage an die 
Platteneinrichtung aufweist, dadurch gekenn- 
zeichnet, daB das Verfahren folgende Schritte auf- 
weist: 



sind. 

16. Das Verfahren nach Anspruch 13, das femer den 
Schritt des Ungultigmachens (S1 7) aller Schreibda- 

5 ten und der korrespondierenden Schreibanfragen 
umfalit, die nach dem letzten Prufpunkt erzeugt 
worden sind, wenn ein Fehler aufgetreten ist. 

17. Das Verfahren nach Anspruch 13, wobei der nicht- 
fO fluchtige Speicher eine unbestimmte Warteschlan- 
ge (31) zum Speichem von Schreibdaten und der 
zugehorigen Schreibanfrage, die nach dem letzten 
Prufpunkt erzeugt wurden, und eine bestimmte 
Warteschlange (32) zum Speichem von Schreibda- 

15 ten, die vor dem.letzten Prufpunkt erzeugt wurden, 
auf* der Platteneinrichtung umfalit, wobei das Ver- 
fahren femer den Schritt des Verschiebens (S15) 
der Schreibanfrage und Schreibdaten, die in der un- 
bestimmten Warteschlange gespeichert sind, in ei- 

20 ne bestimmte Warteschlange aufweist, wahrend ei- 
ne. Prufpunktoperation ausgefuhrt wird. 



Erstes Speichem (S10) von Schreibdaten und 
einer zugehorigen Schreibanfrage von dem ge- 
nannten Betriebssystem an die genannte Plat- 
teneinrichtung in einem nichtfluchtigen Spei- 
cher (3); 

zweites Speichem (S17, S130) der in dem 
nichtfluchtigen Speicher (3) gespeicherten 
Schreibdaten in die genannte Platteneinrich- 
tung (4), wobei der zweite Speicherschritt den 
Schritt des Speicherns der vor dem letzten 
Prufpunkt erzeugten Schreibdaten aus dem 
nichtfluchtigen Speicher (3) in die Plattenein- 
richtung (4) umfalit. 

14. Das Verfahren nach Anspruch 13, das femer den 
Schritt des Meldens (S13) einer Beendigung des 
Schreibens an das Betriebssystem aufweist, nach- 
dem die Schreibdaten und die zugehorige Schreib- 
anfrage in den nichtfluchtigen Speicher geschrie- 
ben sind, wenn eine Schreibanfrage von dem Be- 
triebssystem an die Platteneinrichtung ausgegeben 
wird. 

15. Das Verfahren nach Anspruch 13, das femer fol- 
gende Schritte aufweist: 



18. Das Verfahren nach Anspruch 13, wobei der nicht- 
fluchtige Speicher eine unbestimmte Warteschlan- 
ge (31) zum Speichem von Schreibdaten und der 
zugehorigen Schreibanfrage, die nach dem letzten 
Prufpunkt erzeugt wurde, und eine bestimmte War- 
teschlange (32) zum Speichem von Schreibdaten, 
die vor dem letzten Prufpunkt erzeugt wurden, in 
der Platteneinrichtung aufweist, wobei der zweite 
Speicherschritt den Schritt des Speicherns (S17) 
der in der bestimmten Warteschlange gespeicher- 
ten Schreibdaten in der Platteneinrichtung umfalit 

19. Das Verfahren nach Anspruch 13, wobei der nicht- 
fluchtige Speicher eine unbestimmte Warteschlan- 
ge (31) zum Speichem von Schreibdaten und der 
zugehorigen Schreibanfrage, die nach dem letzten 
Prufpunkt erzeugt wurden, und eine bestimmte 
Warteschlange (32) zum Speichem von Schreibda- 
ten und der zugehorigen Schreibanfrage, die vor 
dem letzten Prufpunkt erzeugt wurden, in der Plat- 
teneinrichtung aufweist, wobei das Verfahren femer 
den Schritt des Speicherns (S19) aller Schreibda- 
ten, die in der bestimmten Warteschlange gespei- 
chert sind, in die Platteneinrichtung aufweist, w3h- 
rend sich das Computersystem wiederherstellt. 



30 



35 



40 



Erstes Lesen (S21, S25) der Schreibdaten aus 
dem nichtfluchtigen Speicher, wenn erfalite 50 
Schreibdaten unter den in dem nichtfluchtigen 
Speicher gespeicherten Schreibdaten sind, 
wenn das Betriebssystem eine Leseanfrage an 
die Platteneinrichtung ausgibt und 
zweites Lesen (S21, S23) der Schreibdaten 55 
von der Platteneinrichtung, wenn unter den in 
dem nichtfluchtigen Speicher (3) gespeicher- 
ten Schreibdaten nicht erfalite Schreibdaten 



20. Das Verfahren nach Anspruch 1 3, wobei der nicht- 
fluchtige Speicher eine unbestimmte Warteschlan- 
ge (31) zum Speichem aller Schreibdaten und der 
zugeharigen Schreibanfrage, die nach dem letzten 
Prufpunkt erzeugt wurden, aufweist, wobei der er- 
ste Speicherschritt den Schritt des Verwerfens 
(S1 7) der Schreibdaten und der Schreibanfragen in 
der unbesdtimmten Warteschlange nach dem Auf- 
treten eines Fehlers aufweist. 
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Revendications 

1. Systeme informatique executant periodiquement 
une operation de point de contrdle, le systeme re- 
demarrant a partir du dernier point de controle avant 
une erreur survenant a I'interieur, le systeme com- 
prenant une unite de disque (4) pour stocker des 
donnees a traiter dans le systeme, et un systeme 
d'exploitation (15) pour delivrer une demande 
d'ecriture a ('unite de disque, caractertse en ce que 
ladite unite de disque sert a la lecture et le stockage 
de donnees ; ledit systeme d'exploitation sert a de- 
livrer une demande d'ecriture ou de lecture a I'unite 
de disque ; et en ce que le systeme comprend en 
outre : 

une memoire non volatile (3) ; 
des moyens de stockage de demandes d'ecri- 
ture (11) pour stocker des donnees d'ecriture 
et une demande d'ecriture associee dans la 
memoire non volatile ; et 
des moyens d'ecriture sur disque (14) pour 
stocker les donnees d'ecriture stockees dans 
la memoire non volatile par les moyens de stoc- 
kage de demandes d'ecriture dans I'unite de 
disque, les moyens d'ecriture sur disque com- 
prenant en outre des moyens pour stocker des 
donnees d'ecriture selon la demande d'ecriture 
generee avec le dernier point de controle de la 
memoire non volatile a I'unite de disque. 

2. Systeme informatique selon la revendication 1 , ca- 
ractertse en ce que le systeme comprend des 
moyens pour notifter une fin d'ecriture au systeme 
d'exploitation, apres avoir stocke la demande 
d'ecriture et les donnees d'ecriture associees dans 
la memoire non volatile, lorsqu'une demande d'ecri- 
ture du systeme d'exploitation a I'unite de disque 
est delivree. 

3. Systeme informatique selon la revendication 1 , ca- 
ractertse en ce que le systeme comprend en 
outre : 

des moyens pour lire les donnees d'ecriture de 
la memoire non volatile s'il y a les donnees cor- 
respondantes sur la memoire non volatile, lors- 
que le systeme d'exploitation delivre une de- 
mande de lecture a I'unite de disque ; et 
des moyens pour lire les donnees d'ecriture de 
I'unite de disque, sll n'y a pas les donnees cor- 
respondantes dans la memoire non volatile. 

4. Systeme informatique selon la revendication 1 , ca- 
ractertse en ce que le systeme comprend en outre 
des moyens de suppression de demandes d'ecritu- 
re (13) pour invalider des donnees d'ecriture et les 
demandes d'ecriture correspondantes generees 



apres le dernier point de controle, lorsqu'une erreur 
survient dans le systeme. 

5. Systeme informatique selon la revendication 1 , ca- 
ractertse en ce que les moyens de stockage de 
demandes d'ecriture comprennent une file d'attente 
indefinie (31) pour stocker une demande d'ecriture 
qui est generee apres le dernier point de contrdle, 
et une file d'attente definie (32) pour stocker une 
demande d'ecriture qui est generee avant le dernier 
point de controle. 

6. Systeme informatique selon la revendication 5, ca- 
ractertse en ce que le systeme comprend en outre 
des moyens de determination de demandes d'ecri- 
ture (12) pour transferer les donnees d'ecriture 
stockees de la file d'attente indefinie a la file d'at- 
tente definie, alors qu'une operation de point de 
controle est executee. 

7. Systeme informatique selon la revendication 5, ca- 
ractertse en ce que les moyens de stockage de 
demandes d'ecriture comprennent des moyens 
pour stocker la demande d'ecriture et les donnees 
d'ecriture associees dans la file d'attente indefinie. 

8. Systeme informatique selon la revendication 5, ca- 
ractertse en ce que les moyens d'ecriture sur dis- 
que comprennent des moyens pour stocker les don- 
nees d'ecriture stockees dans la file d'attente defi- 
nie dans i'unite de disque. 

9. Systeme informatique selon la revendication 5, ca- 
ractertse en ce que le systeme comprend des 
moyens pour stocker toutes les donnees d'ecriture 
stockees dans la file d'attente definie dans I'unite 
de disque, tout en redemarrant le systeme informa- 
tique. 



40 10. Systeme informatique selon la revendication 5, ca- 
ractertse en ce que les files d'attente indefinies et 
definies comprennent des moyens de blocs de con- 
trole pour controler chacune des donnees d'ecriture 
et la demande d'ecriture associee, chacune des 

45 donnees d'ecriture ayant une structure de demande 
pour lier des donnees d'ecriture et la structure de 
demande suivante. 

11. Systeme informatique selon la revendication 10, 
so caractertse en ce que la structure de demande 
comprend un indicateur d'ecriture pour indiquer que 
le traitement d'ecriture sur Punite de disque est exe- 
cute. 

55 12. Systeme informatique selon la revendication 1 1 , ca- 
ractertse en ce que les moyens d'ecriture sur dis- 
que comprennent : 
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des moyens pour detecter si un indicateur 
d'ecriture de la structure de demande est initia- 
lise ou non ; 

des moyens pour initialiser I'indicateur d'ecritu- 
re, si I'indicateur d'ecriture n'est pas initialise ; 
des moyens pour stocker des donnees d'ecri- 
ture de la file d'attente definie sur I'unite de dis- 
que, sur la base dlnformations de la structure 
de demande ; et 

des moyens pour supprimer la structure de de- 
mande et les donnees d'ecriture associees 
lorsque I'ecriture des donnees sur I'unite de dis- 
que est achevee. 

1 3. Procede de controle d'acces au disque dans un sys- 
teme informatique executant periodiquement une 
operation de point de controle, le systeme redemar- 
rant a partir du dernier point de controle avant une 
erreur survenant a I'interieur, le systeme compre- 
nant une unite de disque pour stocker des donnees 
a traiter dans le systeme et un systeme Sexploita- 
tion pour delivrer une demande d'ecriture sur I'unite 
de disque, caracterise par les etapes de : 

premier stockage (S10) des donnees d'ecriture 
et une demande d'ecriture associee dudit sys- 
teme d'exploitation a ladite unite de disque 
dans une memoire non volatile (3) ; 
deuxieme stockage (S17, S130) des donnees 
d'ecriture stockees dans la memoire non vola- 
tile (3) dans ladite unite de disque (4), I'etape 
de deuxieme stockage comprenant I'etape de 
stocker des donnees d'ecriture generees avant 
le dernier point de controle de la memoire non 
volatile (3) a I'unite de disque (4). 

14. Procede selon la revendication 13, comprenant en 
outre I'etape de notification (S1 3) d'une fin d'ecriture 
au systeme d'exploitation, apres avoir stocke les 
donnees d'ecriture et la demande d'ecriture asso- 
ciee dans la memoire non volatile, lorsqu'une de- 
mande d'ecriture du systeme d'exploitation a I'unite 
de disque est delivree. 

1 5. Procede selon la revendication 1 3, comprenant en 
outre les etapes de : 

premiere lecture (S21, S25) des donnees 
d'ecriture de la memoire non volatile, si des 
donnees d'ecriture sont acquises panmi les 
donnees d'ecriture stockees dans la memoire 
non volatile, lorsque le systeme d'exploitation 
delivre une demande de lecture a I'unite de 
disque ; et 

deuxieme lecture (S21, S23) des donnees 
d'ecriture de I'unite de disque, si des donnees 
d'ecriture ne sont pas acquises parmi les don- 
nees d'ecriture stockees dans la memoire non 



volatile (3). 

16. Procede selon la revendication 13, comprenant en 
outre I'etape d'invalidation (S17) de toutes les don- 

5 nees d'ecriture et de la demande d'ecriture corres- 
pondante generees apres le dernier point de con- 
trole, si une erreur est apparue 

17. Procede selon la revendication 13, dans lequel la 
10 memoire non volatile comprend une file d'attente in- 

definie (31 ) pour stocker des donnees d'ecriture et 
la demande d'ecriture associee generees apres le 
dernier point de controle, et une file d'attente definie 
(32) pour stocker des donnees d'ecriture dans I'uni- 

15 te de disque generees avant un dernier point de 
controle, comprenant en outre I'etape de transfert 
(S15) de la demande d'ecriture et des donnees 
d'ecriture stockees d'une file d'attente indefinie a 
une file d'attente definie, pendant I'execution de 

20 I'operation du point de controle. 

18. Procede selon la revendication 13, dans lequel la 
memoire non volatile comprend une file d'attente in- 
definie (31 ) pour stocker des donnees d'ecriture et 

25 la demande d'ecriture associee generees apres le 
dernier point de controle, et une file d'attente definie 
(32) pour stocker dea donnees d'ecriture dans I'uni- 
te de disque generees avant le dernier point de con- 
trole, dans lequel I'etape de deuxieme stockage 

30 comprend I'etape de stockage (S17) des donnees 
d'ecriture stockees dans la file d'attente definie 
dans I'unite de disque. 

19. Procede selon la revendication 13, dans lequel la 
35 memoire non volatile comprend une file d'attente in- 
definie (31 ) pour stocker des donnees d'ecriture et 
la demande d'ecriture associee generees apres le 
dernier point de controle, et une file d'attente definie 
(32) pour stocker des donnees d'ecriture et la de- 

40 mande d'ecriture associee dans I'unite de disque 
generees avant le dernier point de controle, com- 
prenant en outre I'etape de stockage (S19) de tou- 
tes les donnees d'ecriture stockees dans la file d'at- 
tente definie dans I'unite de disque, pendant la res- 

45 tauration du systeme informatique. 

20. Procede selon la revendication 13, dans lequel la 
memoire non volatile comprend une file d'attente in- 
definie (31 ) pour stocker des donnees d'ecriture et 

so la demande d'ecriture associee generees apres le 
dernier point de controle, dans lequel la premiere 
etape de stockage comprend I'etape de suppres- 
sion (S1 7) des donnees d'ecriture et des demandes 
d'ecriture dans la file d'attente indefinie apres ap- 

55 parition d'une erreur. 
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